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Thesis:  The  Marine  Corps  needs  to  fully  utilize  the  power  of  eloud  eomputing  in  order  to  reduce 
spending  and  manpower,  ultimately  providing  efficiency  and  savings. 

Discussion:  Innovation  in  technology  today  is  moving  at  an  ever  quickening  pace.  Efficiencies 
and  convenience  are  being  discovered  and  created  in  the  private  sector  on  a  daily  basis. 
Computing  is  not  exempt  from  this  concept.  In  the  past  users  of  computers  were  forced  to 
remain  at  their  desk  and  work  from  a  single  workstation.  This  created  the  need  for  organizations 
to  enlist  a  large  Information  Technology  (IT)  workforce  in  order  to  accommodate  the 
requirement  to  readily  respond  to  computing  problems  ranging  from  software  patches  to 
resolving  hardware  problems.  As  computers  grew  in  popularity  over  the  past  three  decades  the 
amount  of  data  users  have  stored  has  risen.  The  creation  of  cloud  computing  is  a  natural 
evolution  to  solving  these  aforementioned  issues.  Rather  than  passing  information  from  one  user 
to  another  in  a  linear  pattern,  cloud  computing  places  the  data  in  a  centralized  location  for  all 
users  to  access  on  demand.  This  centralization  of  data  relies  on  the  users  having  access  through 
an  internet  connection.  The  result  is  the  ability  to  access  your  information  from  anywhere  in  the 
world,  provided  you  access  to  the  internet.  By  transferring  storage  and  hosting  of  software  to  a 
centralized  location,  organizations  can  transfer  many  of  their  IT  costs  to  the  cloud  services 
provider,  as  well  as,  increase  the  efficiency  of  its  workforce  through  increased  access  to  their 
information.  This  ability  to  transfer  costs  normally  assumed  by  an  organization  to  a  third  party 
has  applications  within  the  Federal  Government  as  it  faces  a  depressed  economy.  The  Marine 
Corps  is  no  different.  The  desire  to  cut  defense  spending  in  order  to  assist  the  overall  Federal 
budget  has  left  Marine  Corps  leadership  with  difficult  decisions  on  where  to  trim  unnecessary 
spending.  Cloud  computing  can  alleviate  the  pressure  to  cut  programs  or  reduce  the  service 
workforce.  Moving  to  a  full  cloud  computing  environment  will  positively  increase  access  to 
information,  as  well  as,  reduce  operating  costs  across  the  Marine  Corps  IT  environment.  This 
paper  intends  to  demonstrate  what  cloud  computing  is,  its  background,  and  the  positive 
applications  it  can  have  on  the  Marine  Corps. 

Conclusion:  Cloud  computing  will  be  the  future  of  the  computing  for  the  private  sector,  as  well 
as  public  institutions.  It  is  cost  effective  and  a  successful  business  model,  if  executed  correctly. 
The  federal  government  has  taken  notice  and  implemented  policy  to  push  into  the  realm  of  cloud 
computing.  The  Marine  Corps  needs  to  fully  adopt  this  new  paradigm  in  order  to  save  money 
and  reduce  manpower  during  this  restrictive  economic  environment. 
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Preface 


The  purpose  of  this  paper  is  to  demonstrate  the  utility  of  cloud  computing  and  the  efficiency  it 
brings  to  an  organization,  specifically  the  United  States  Marine  Corps.  As  a  result  of  changing  the 
paradigm  of  computing  and  access  to  information,  cloud  computing  offers  the  opportunity  to  save  real 
money  and  reduce  manpower.  As  the  United  States  economy  faces  overwhelming  debt  and  federal 
agencies  compete  for  shrinking  dollars,  the  Marine  Corps  should  consider  moving  fully  to  a  cloud 
computing  strategy  in  order  to  save  money  and  manpower. 

Assistance  and  support  from  this  project  was  received  from  the  Gray  Research  Library, 
specifically,  Ms.  Rachel  Kincaid.  Additionally  assistance  was  received  from  Major  Shawn  Kelly,  Major 
Chris  Beckford  (Ret),  and  Bruce  Sabol.  These  gentlemen  provided  me  information  and  understanding  of 
cloud  computing  as  it  applies  to  the  world  and  its  basis  within  the  Federal  Government,  specifically  the 
Department  of  Defense.  Additionally,  I  received  support  from  my  research  mentor  Dr.  Richard  DiNardo 
who  provided  me  the  guidance  to  branch  out  on  this  relatively  new  topic  within  the  Federal  Government. 
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Introduction 


Today’s  technological  environment  is  expanding  at  an  ever-increasing  pace.  Equipment 
and  technologies  believed  to  be  current  are  typically  obsolete  within  six  months  to  a  year  of 
release.  Access  to  the  World  Wide  Web,  or  the  internet  as  it  is  commonly  referred  to,  has 
increased  exponentially  since  its  introduction  in  1982  when  the  Advanced  Research  Projects 
Agency  (ARP A)  facilitated  the  ability  for  their  ARPANET  to  be  networked  throughout  the 
world.  Since  then  the  world  has  increasingly  become  smaller.  Subsequently  the  modern 
workspace  as  it  was  known  has  become  increasingly  irrelevant.  This  irrelevance  is  a  result  of  the 
expansion  of  technology  within  computing  and  through  mobile  platforms,  such  as  tablets, 
smartphones,  and  laptops.  This  expansion  has  created  an  environment  that  provides  the 
consumer  with  the  ability  to  access  information  in  any  environment  and  any  place.  So  long  as 
the  he  or  she  has  access  to  a  satellite  and/or  a  wireless  router  information  can  be  consumed, 
downloaded,  and  stored  through  the  internet. 

One  negative  consequence  of  the  rise  of  these  mobile  platforms  is  the  amount  of  data  that 
can  be  processed  and  ultimately  the  storage  that  is  required  to  maintain  the  data.  Additionally, 
because  the  world  is  becoming  more  connected,  less  and  less  are  people  working  at  a  stationary 
desk  or  workspace  and  often  able  travel,  while  accessing  work  or  information  they  desire.  The 
rise  of  technology  has  not  only  turned  the  modern  work  day  on  its  head,  it  has  also  changed  the 
idea  of  a  workspace  and  the  ability  to  access  the  information  residing  on  your  computer  from 
anywhere. 

This  ability  to  access  information  via  the  internet  is  the  essence  of  cloud  computing.  It 
provides  the  ability  for  the  user  to  access  documents,  information,  applications,  or  software 
anywhere  in  the  world,  on  any  computer,  as  it  is  all  stored  in  what  is  referred  to  as  a  “cloud”. 
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The  cloud  provides  the  ability  to  reduce  the  amount  of  hardware  and  software  that  was  originally 
utilized.  Subsequently  resources,  such  as  money  and  human  capital  can  be  reduced.  This 
provides  an  attractive  method  of  operating  for  many  private  sector  corporations  today.  Google  is 
the  best  example  of  a  large  scale  company  utilizing  the  cloud.  In  fact  Google’s  email  service  is 
based  entirely  on  cloud  computing  and  provides  significant  amounts  of  memory  and  utility  as  it 
can  be  accessed  from  anywhere.  Further  they  have  expanded  their  cloud  services  to  their 
“Google  Docs”  application  in  which  you  can  create  and  store  documents  online.  The  private 
sector  is  not  the  only  organization  to  have  noticed  the  advantages  to  cloud  computing. 

The  Federal  Government  is  quickly  recognizing  the  value  with  cloud  computing,  both 
with  efficiency  and  saved  resources.  Within  the  Federal  Government  many  agencies  have  begun 
a  migration,  albeit  a  slow  one,  to  the  cloud  in  order  to  maximize  savings  to  their  respective 
budget.  As  an  example  “U.S.  General  Services  Administration  is  the  first  federal  agency  to 
successfully  migrate  its  employees  to  a  cloud-based  email  service  using  Google  Apps  for 
Government.”'  With  this  move  to  a  cloud  based  email  service  the  GSA  intends  “to  save  millions 
in  taxpayer  dollars  annually.  We  expect  that  using  a  cloud-based  system  will  reduce  email 
operation  costs  by  50  percent  over  the  next  five  years  and  save  more  than  $15.2  million  for  the 
agency  in  that  time”  The  Departments  of  State,  Treasury,  and  Interior  have  also  begun  moving 
to  a  cloud  based  system  within  their  organizations.  The  United  States  Army  intends  on  moving 
all  employees  of  the  Army,  both  military  and  civilian,  to  a  cloud  based  email  service,  saving  over 
“100  million  dollars  annually.”  This  paper  intends  to  demonstrate  the  benefits  of  cloud 
computing  for  the  United  States  Marine  Corps,  as  well  as,  address  mitigation  strategies  towards 
concerns  about  risk  within  cloud  computing. 
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As  the  United  States  Government  faces  the  daunting  task  of  reducing  our  overwhelming 
debt  crisis,  the  Department  of  Defense,  specifically  the  United  States  Marine  Corps  must  make 
hard  decisions  with  budget  cuts  to  not  only  Operations  and  Maintenance  Costs,  Manpower  Costs, 
but  procurement  costs  as  well.  These  costs  can  be  offset  through  changes  the  Marine  Corps 
could  make  internally.  The  Marine  Corps  needs  to  fully  utilize  the  power  of  cloud  computing  in 
order  to  reduce  spending  and  manpower,  ultimately  providing  efficiency  and  savings. 

Definition 

This  ability  to  access  information  via  the  internet  is  the  essence  of  cloud  computing.  It 
provides  the  ability  for  the  user  to  access  documents,  information,  applications,  or  software 
anywhere  in  the  world  on  any  computer  as  it  is  all  stored  in  what  is  referred  to  as  a  “cloud”.  The 
universally  accepted  definition  for  cloud  computing,  “as  defined  by  the  National  Institute  of 
Standards  and  Technology  (NIST),  a  model  for  enabling  convenient,  on-demand  network  access 
to  a  shared  pool  of  configurable  computing  resources  that  can  be  rapidly  provisioned  and 
released  with  minimal  management  effort  or  service  provider  interaction.”"^  In  plain  English  this 
means  is  the  user’s  data  or  information  is  contained  in  a  centralized  location,  such  as  a  data 
center,  able  to  be  accessed  through  the  internet  from  any  location  in  the  world  with  internet 
access.  This  provides  the  “on-demand”  portion  of  the  NIST  definition.  The  “pooled  resources” 
refer  to  any  location  that  maintains  the  servers  to  house  the  information,  software,  applications, 
or  infrastructure  for  the  specific  cloud  that  you  are  using.  Darrell  West  of  the  Brookings 
Institution  defines  cloud  computing  simply  as  “services,  applications,  and  data  storage  delivered 
online  through  powerful  file  servers.”^  What  makes  cloud  computing  attractive  is  you  are  able  to 
quickly  access  your  information  without  being  tied  to  your  local  workstation  at  your  workspace 
or  home  office.  Additionally  the  speed  at  which  you  can  access  your  information  is  improved. 
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History  of  Cloud  Computing 

While  the  ability  to  conduet  eloud  computing  has  come  into  vogue  over  the  past  decade, 
it  was  actually  envisioned  over  40  years  ago.  “Cloud  computing,  although  new,  was  actually 
foreshadowed  by  John  McCarthy  back  in  the  1960's.  McCarthy,  a  computer  and  cognitive 
scientist  believed  that  eventually,  compute  power  would  be  provided  as  a  metered  service.”*’ 

.John  McCarthy,  considered  widely  to  be  the  father  of  Artificial  Intelligence,  described  the  use  of 
computing  and  time-sharing  at  the  centennial  of  the  Massachusetts  Institute  of  Technology 
(MIT)  during  a  conference  in  1961.  During  this  conference  McCarthy  introduced  the  notion 
“that  computer  time-sharing  technology  might  lead  to  a  future  in  which  computing  power  and 
even  specific  applications  could  be  sold  through  the  utility  business  model  (like  water  or 
electricity).”^  Later  McCarthy  reflected  that  his  intent  for  that  speech  and  the  notion  of  time¬ 
sharing  or  what  is  now  referred  to  as  cloud  computing  was  “an  operating  system  that  permits 
each  user  of  a  computer  to  behave  as  though  he  were  in  sole  control  of  a  computer,  not 
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necessarily  identical  with  the  machine  on  which  the  operating  system  is  running.”  Essentially 
as  mentioned  before  time-sharing,  or  cloud  computing,  allowed  each  person  to  use  a  computer  as 
if  it  were  his  or  her  system  that  was  being  used,  but  instead,  consumers  would  be  accessing  the 
system  from  another  location  through  the  internet. 

Arguably  this  concept  was  significantly  ahead  of  its  time  as  the  internet  had  yet  to  be 
introduced  to  the  lexicon  of  the  world.  Understanding  cloud  computing  would  be  incomplete 
without  a  basic  understanding  of  the  evolution  of  the  internet.  In  fact  it  was  not  until  the  late 
1960s  in  which  the  Advanced  Research  Projects  Agency  (ARP A),  what  is  now  DARPA,  created 
ARPANET.  In  response  to  the  fear  that  the  Russians  could  destroy  the  American  phone  system 
with  one  missile  “a  scientist  from  M.I.T.  and  ARPA  named  J.C.R.  Eicklider  proposed  a  solution 
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to  this  problem:  a  “galactic  network”  of  computers  that  could  talk  to  one  another.  Such  a  network 
would  enable  government  leaders  to  communicate  even  if  the  Soviets  destroyed  the  telephone 
system.”^ 

Following  Licklider’s  solution  and  creation  of  ARPANET  another  scientist  from  M.I.T 
created  a  system  to  send  data  to  each  computer.  Known  as  “Packet  switching”  it  broke  down 
information  into  small  enough  ’’blocks,  or  packets,  before  sending  it  to  its  destination.  That  way, 
each  packet  can  take  its  own  route  from  place  to  place.  Without  packet  switching,  the 
government’s  computer  network — now  known  as  the  ARPANET — ^would  have  been  just  as 
vulnerable  to  enemy  attacks  as  the  phone  system.” Eventually  as  more  and  more  computers 
were  added  to  ARPANET  and  the  resulting  network,  other  networks  were  added  around  the 
globe,  thus  adding  more  and  more  computers  to  the  network  and  ultimately  the  “internet.” 

In  order  for  each  network  to  adequately  work  together  they  had  to  be  able  to  recognize 
each  other  when  they  needed  to  pass  or  accept  information.  Vinton  Cerf,  who  was  also  working 
for  ARP  A,  had  begun  to  solve  this  problem  by  developing  a  way  for  all  of  the  computers  on  all 
of  the  world’s  mini-networks  to  communicate  with  one  another.  He  called  his  invention 
“Transmission  Control  Protocol,”  or  TCP.  (Later,  he  added  an  additional  protocol,  known  as 
“Internet  Protocol...  One  writer  describes  Cerf  s  protocol  as  “the  ‘handshake’  that  introduces 
distant  and  different  computers  to  each  other  in  a  virtual  space.”  ''  The  ability  for  computers  to 
“talk”  each  other,  as  well  as,  packet  switching  enabled  the  use  of  information  to  be  sent  to  each 
other  over  the  internet. 

Over  time  the  overwhelming  use  of  the  internet  led  to  significant  amounts  of  data  being 
collected  and  stored  by  individual  users.  The  cloud  addresses  these  issues  by  providing 
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“scaleable  and  shareable  resources  over  the  Internet  (Computing  and  storage  ‘as  a  service)” 
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This  concept  is  exactly  what  John  McCarthy  referred  to  in  1961  during  his  speech  to  M.I.T. 
“Cloud  computing  gives  users  aeeess  to  massive  eomputing  and  storage  resources  without  their 
having  to  know  where  those  resourees  are  or  how  they’re  configured.”  Over  the  two  following 
deeades  the  world  witnessed  the  rise  of  the  personal  eomputer  through  innovators  sueh  as  Bill 
Gates  with  Mierosoft  and  Steve  Jobs  through  the  Maeintosh  eomputer  brand.  Ultimately,  the 
eomputer  teehnology  beeame  more  streamlined  and  effieient.  It  was  not  long  before 
entrepreneurs  reeognized  the  power  of  eomputing  and  the  use  of  the  internet  in  our  daily  lives. 

At  the  eonelusion  of  the  20*  eentury  one  eompany  was  started  that  would  have  the  largest 
influenee  on  cloud  computing.  That  company  was  Google. 

Google  has  dominated  the  eloud  serviees  throughout  the  past  deeade.  Their  effort  to 
“organize  the  world’s  data”^"^  has  brought  great  efficieney  and  aeeess,  as  well  as,  concern  over 
privacy  of  personal  information  and  data.  Examples  of  Google’s  efforts  in  the  eloud  are  their 
email  service  known  to  most  as  Gmail.  Additionally  Google  has  ereated  the  ability  for  users  to 
ereate  and  store  documents  in  the  cloud  in  order  to  collaborate  with  others,  as  well  as,  aeeess 
these  doeuments  from  any  workstation.  These  serviees,  along  with  others  sueh  as  Google 
Calendars,  Google  Maps,  Google+  (Google’s  answer  to  Facebook),  have  caused  significant 
concern  to  many  over  the  storage  of  so  mueh  personal  data.  Most  would  eounter  that  utilizing 
Google  for  all  of  your  personal  needs  ereates  efficieney.  These  eoncerns  bring  up  the  arguments 
and  reservations  many  have  over  the  future  of  eloud  eomputing. 

Benefits  and  Risks 

The  benefits  and  risks  assoeiated  with  eloud  eomputing  vary  with  the  type  of  serviee  and 
cloud  you  decide  to  use,  but  there  are  eore  concerns  that  all  users  who  deeide  to  utilize  eloud 
serviees  must  eonfront  and  either  rejeet  or  aeeept  based  upon  the  benefits  eloud  eomputing 
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provides.  Advocates  of  cloud  computing  cite  benefits  such  as  efficiency,  agility,  and  innovation. 
Executed  properly  these  benefits  can  reduce  overall  operating  costs. 

The  use  of  cloud  computing  can  provide  a  level  of  efficiency  previously  not  available  to 
organizations.  These  “efficiency  improvements  will  shift  resources  towards  higher  value 
activities.”  Ostensibly  through  use  of  the  cloud  IT  personnel  can  be  reduced  or  provided  focus 
on  different  areas  of  importance  within  the  organization.  Specifically  “cloud  computing  can 
allow  IT  organizations  to  simplify,  as  they  no  longer  have  to  maintain  complex,  heterogeneous 
technology  environments.  Focus  will  shift  from  the  technology  itself  to  the  core  competencies 
and  mission  of  the  agency.”'^  Additional  efficiency  can  be  obtained  through  the  reduction  of  IT 
personnel.  Because  the  software  utilized  by  personnel  is  maintained  within  a  central  data  center 
and  accessed  through  the  cloud,  numerous  updates  and  patches  to  the  organizations  designated 
cloud  software  application  can  be  executed  at  the  remote  data  center  by  a  relatively  few  amount 
of  knowledgeable  professionals.  Rather  than  maintaining  a  cadre  of  IT  professionals  on  standby 
to  respond  to  trouble  tickets  or  trouble  calls  these  personnel  can  be  reduced,  leaving  only  the 
necessary  amount  of  employees  to  manage  and  maintain  the  data  center  that  holds  the  data  and 
hardware  to  run  the  respective  cloud.  Darrell  West  cites  a  study  in  which  “agencies  could  cut  15 
percent  of  labor  costs  by  moving  to  a  cloud.  But  these  savings  are  possible  only  if  agencies 
actually  cut  personnel  through  cloud  computing.”  With  the  reduction  of  defense  spending 
many  in  the  federal  government  are  beginning  to  look  towards  this  option. 

Today’s  environment  is  constantly  changing  and  the  development  of  technology,  as  well 
as,  movement  of  information  requires  agility  in  order  to  stay  ahead  of  their  competitors.  The 
Federal  Government  is  no  different.  In  order  to  remain  a  global  leader,  it  must  remain  agile  to 
operate  within  the  global  environment,  this  includes  all  aspects  of  national  power.  Cloud 
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computing  provides  a  level  of  agility  that  the  Federal  Government  does  not  maintain  on  its 
arehaie  eomputing  environment  it  eurrently  operates.  “With  traditional  infrastrueture,  IT  serviee 
reliability  is  strongly  dependent  upon  an  organizations  ability  to  prediet  serviee  demand,  which  is 
not  always  possible.”  The  ability  to  prediet  the  need  for  serviee  demand  may  seem  benign 
within  the  DoD  where  the  appearanee  of  a  fixed  need  for  eomputing  resides.  But  the  ability  to 
remain  flexible  and  sealeable  is  at  the  heart  of  the  DoD  as  a  result  of  dynamie  environment  that 
it  operates  in  throughout  the  globe  and  within  eaeh  eombatant  eommand  (COCOM).  The  DoD 
must  be  able  to  rapidly  seale  use  of  eomputer  systems  up  and  down  as  the  need  is  demanded. 
“Notably,  eloud  eomputing  also  provides  an  important  option  for  ageneies  in  meeting  short  term 
eomputing  needs. .  .ageneies  need  not  invest  in  infrastrueture  in  eases  where  serviee  is  needed  for 
a  limited  period  of  time.”'^ 

Coupled  with  agility  is  the  need  for  organizations  to  remain  innovative.  Ameriea  has 
prided  itself  on  innovation  and  providing  solutions  to  complex  problems  in  a  ehanging 
environment.  Cloud  eomputing  is  no  different.  The  Federal  Government  must  remain 
innovative  to  eontinue  ahead  of  emerging  eountries  seeking  a  plaee  on  the  world  superpower 
stage.  One  quick  way  to  remain  ahead  of  emerging  eountries  is  to  utilize  the  power  of  free 
thought  by  “adopting  innovations  from  the  private  seetor.”  Beeause  the  private  seetor  has 
eaptured  and  eapitalized  on  the  benefits  of  eloud  eomputing  it  has  provided  a  mature 
environment  with  whieh  the  Federal  Government,  speeifieally  the  Marine  Corps  ean  tap  into  in 
order  to  migrate  from  its  existing  structure  to  the  eloud.  The  type  of  eloud  used  depends  on  the 
level  of  seeurity  desired  and  will  be  diseussed.  Cloud  eomputing  also  provides  the  opportunity 
for  public  agencies  to  “take  advantage  of  leading-edge  technologies  including  devices  sueh  as 
tablet  eomputers  and  smart  phones.”  This  opportunity  will  faeilitate  quieker  innovative  ways  to 
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pass  information,  as  well  as,  integrate  familiar  commercial  products  to  federal  employees.  This 
would  enable  reduction  in  cost,  as  “new-start”  technology  could  be  eliminated  in  favor  of  using 


“Commercial  Off-the-Shelf  ’  technology. 

Many  opponents  to  cloud  computing  point  out  that  a  lack  of  security  and  overall  privacy 
are  substantial  risks  that  would  mitigate  the  need  to  adopt  a  cloud  computing  environment. 
Security  issues  are  a  risk  that  must  be  addressed  when  migrating  to  a  cloud.  Threats  from 
hackers,  loss  of  data,  and  decentralized  information  can  provide  an  environment  that  could  be 
exploited  by  the  nation’s  enemies.  These  security  risks  are  no  more  than  the  current  threats  on 
standard  networks  utilized  today.  In  fact  use  of  a  cloud  computing  architecture  could  arguable 
increase  risk  as  you  spread  the  storage  of  information  and  use  of  servers  across  multiple  servers 
and  data  centers  via  horizontal  loading.  Loading  is  a  concept  in  cloud  computing  that  seeks  to 
take  advantage  of  multiple  servers  in  use  at  the  same  time.  For  example  if  there  is  an  application 
running  on  one  server  and  it  becomes  overloaded  with  users  seeking  to  access  that  application, 
future  users  can  be  transitioned  to  the  servers  that  have  the  same  application  in  order  to  decrease 
the  load  on  the  original  server  and  maintain  processing  speed.  This  is  known  as  “virtualization” 
and  is  the  essence  of  cloud  computing.  Additionally  controlling  the  network  and  the 
information  that  resides  in  the  cloud  is  a  fundamental  area  that  must  be  addressed  and 
safeguarded,  but  can  be  done  so  responsibly  and  with  appropriate  cloud  type  selection  and 
architecture  build.  Additional  concerns  with  security  surround  protection  of  consolidated  data 
centers.  Consolidating  data  centers  does  present  a  physical  security  risk,  it  can  also  provide 
opportunities  to  focus  more  security  measures  and  defense  on  a  select  data  centers,  rather  than 
trying  to  protect  a  distributed  data  network  that  can  be  exploited  easily.  These  security  risks  are 
not  left  to  the  individual  organization  to  figure  out.  According  to  the  CRTA  Study  of  Cloud 
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Computing  in  the  Federal  Government  “the  Obama  administration  is  requesting  to  alloeate 

National  Institute  of  Standards  and  Teehnology  (NIST)  a  budget  of  $100  billion  for  developing 
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needed  policies  and  standards  for  cybersecurity  and  how  they  relate  to  cloud  computing” 

Privacy  concerns  are  a  real  issue  as  an  organization’s  data  is  maintained  in  a  centralized 
location  that  can  be  compromised  by  a  select  group  of  individuals  that  work  within  the  data 
center.  This  concern  does  not  provide  any  more  risk  that  what  the  DoD,  specifically  the  Marine 
Corps,  already  exercises  with  contractors  possessing  the  ability  to  review  and  seek  out  specific 
content  within  email  and  internet  use.  The  consistent  vetting  of  employees  and  use  of 
background  checks  must  be  continued  in  order  to  mitigate  any  internal  threats  that  may 
compromise  security  and  privacy.  Currently  there  are  a  number  of  regulations  that  must  be 
adhered  to  when  migrating  to  the  cloud,  to  include  the  “Federal  Information  Security 
Management  Act  (FISMA)  and  the  Health  Insurance  Portability  and  Accountability  Act 
(HIPAA).”^^ 

While  the  risks  of  cloud  computing  can  be  substantial  if  compromised,  they  are  no  more 
problematic  than  security  and  privacy  risks  that  already  exist.  Through  the  use  of  robust  security 
measures,  education,  and  monitoring  these  risks  can  be  mitigated.  In  contrast  the  benefits  of 
cloud  computing  offer  cost  savings  not  otherwise  seen  in  the  traditional  IT  infrastructure  utilized 
by  the  Federal  Government.  The  defense  contracting  company  “Booz  Allen  Hamilton  concludes 
that  government  agencies  moving  to  public  or  private  cloud  can  save  from  50  to  67  percent.” 

As  mentioned  cost-saving  expectations  are  potentially  substantial  according  to  the  Booz, 
Allen,  Hamilton  study,  there  are  numerous  studies  that  predict  more  and  less  savings  through 
migration  to  a  cloud.  What  is  important  to  point  out  is  savings  can  be  expected,  but  these 
savings  are  based  on  the  type  of  cloud  that  is  utilized  by  an  organization.  The  type  of  cloud,  be  it 
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public,  private,  or  hybrid  will  swing  the  amount  of  storage  utilized,  as  well  as,  the  amount  of 
seeurity  needed.  Ultimately  eloud  eomputing  will  provide  a  streamlined  and  more  aeeessible 
network  to  DoD  employees,  speeifieally  the  Marine  Corps.  For  example  the  U.S.  Air  Foree  45th 
Spaee  Wing  “had  60  distinet  file  servers,  but  found  that  it  utilized  only  10  pereent  of  eentral 
proeessing  unit  capaeity  and  60  pereent  of  random  aceess  memory  spaee.”  Through  reduction 
of  their  file  servers  and  “an  internet  eloud  to  link  the  data  eenters. .  .Commanders  estimate  they 
save  $180,000  per  year  in  eomputing  eosts.  This  ineludes  $104,000  in  hardware  costs,  $30,000  in 
power  to  eool  what  used  to  be  60  file  servers,  and  $28,000  in  maintenanee  eosts. 

Types  of  Clouds  and  Service  Models 

Each  organization  has  its  own  needs  for  cloud  services,  some  range  from  security,  others 
to  enable  as  much  collaboration  as  possible  across  their  company  or  designated  population. 

There  are  four  deployment  models  for  clouds  are  public,  private,  community,  and  hybrid.  Each 
one  of  these  clouds  will  be  discussed  below,  but  to  summarized  the  amount  of  security 
progresses  significantly  from  public  to  private,  with  the  hybrid  cloud  combining  the  benefits  of 
both. 

A  public  cloud  is  exactly  what  it  sounds  like.  “The  cloud  infrastructure  is  made  available 
to  the  general  public  or  a  large  industry  group  and  is  owned  by  an  organization  selling  cloud 
services.”  The  advantages  of  the  public  cloud  are  they  are  easier  to  migrate  to,  as  well  as, 
cheaper  to  operate  as  a  lot  of  the  management  and  the  maintenance  of  the  cloud  are  executed  by 
the  owner  of  the  cloud.  The  disadvantage  to  the  public  cloud  is  it  provides  the  least  amount  of 
security  due  in  large  part  to  the  lack  of  restrictions  to  access  within  the  cloud.  The  community 
cloud  “is  shared  by  several  organizations  and  supports  a  specific  community  that  has  shared 
concerns  (e.g.,  mission,  security  requirements,  policy,  and  compliance  considerations).”  This 
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model  provides  for  multiple  parties  using  the  same  eloud.  One  example  could  be  several 
agencies  within  the  Federal  Government  or  a  larger  organization  that  enlists  like  companies  to 
share  and  spreadload  the  cost  of  the  cloud  services. 

The  private  cloud  provides  the  most  attractive  option  for  those  agencies  with  significant 
security  concerns.  The  private  cloud  “infrastructure  is  operated  solely  for  an  organization.  It 
may  be  managed  by  the  organization  or  a  third  party.”  Finally  the  last  accepted  deployment 
model  is  the  hybrid  cloud  in  which  you  combine  a  public  and  private  cloud  in  order  to  capitalize 
on  the  public  cloud  for  less  secure  needs  and  use  the  private  cloud  to  back  up  sensitive 
information  or  conduct  more  secure  operations.  Specifically  the  hybrid  cloud  “infrastructure  is  a 
composition  of  two  or  more  clouds  (private,  community,  or  public)  that  remain  unique  entities 
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but  are  bound  together  by  standardized  or  proprietary  technology.” 

On  top  of  the  four  deployment  models  there  are  three  universally  accepted  service 
models.  They  are  Software  as  a  Service  (SaaS),  Platform  as  a  Service  (PaaS)  and  Infrastructure 
as  a  Service  (laaS).  A  diagram  of  these  service  models  can  be  seen  in  Figure  1.  At  the  lowest 
level  of  cloud  services  is  the  laaS.  laaS  is  the  “leasing  of  infrastructure  (computing  resources 
and  storage)  as  a  service. .  .In  essence,  it’s  the  capability  of  leasing  a  computer  or  data  center  with 
specific  quality-of-service  constraints.”  The  next  level  of  service  provided  within  a  cloud  is  the 
Platform  as  a  Service  or  PaaS.  PaaS  is  a  model  in  which  the  user  can  “deploy  his  or  her  own 
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applications”  within  the  provider’s  cloud.  “The  consumer  does  not  manage  or  control  the 
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underlying  cloud  infrastructure  including,  network,  servers,  operating  systems  or  storage.” 

One  example  of  PaaS  is  the  Google  Apps  engine.  Users  can  create  applications  then  release 
them  within  the  Google  cloud.  SaaS  is  the  most  common  understood  and  identifiable  cloud  to 
those  who  are  unfamiliar  with  cloud  computing.  Anytime  you  utilize  a  web-based  email  service 


17 


such  as  Gmail  you  are  accessing  the  cloud  via  Software  as  a  Service  (SaaS).  Anytime  you  order 
something  from  the  internet  you  are  using  a  cloud  based  service.  A  more  formal  definition  for 
SaaS  is  the  ability  to  access  software  over  the  Internet  as  a  service.”  While  it  would  be  easy  to 
assume  that  a  consumer  can  utilize  just  one  service  model,  more  than  likely  consumers  will 
utilize  all  three  in  a  “collection  of  services. 

Federal  Government  and  Cloud  Computing 

Recognizing  the  importance  of  cloud  computing  within  private  industry,  as  well  as,  the 
cost  savings  that  have  been  attributed  with  the  correct  employment  of  cloud  services  has  been 
noticed  by  the  Federal  Government.  The  United  States  Chief  Information  Officer  (CIO),  Vivek 
Kundra,  released  the  Federal  Cloud  Computing  Strategy  on  8  February  2011.  In  his  executive 
summary  he  states  the  “Federal  Government’s  current  Information  Technology  (IT)  environment 
is  characterized  by  low  asset  utilization,  a  fragmented  demand  for  resources,  duplicative  systems, 
environments  which  are  difficult  to  manage,  and  long  procurement  times.”  He  goes  on  in  the 
succeeding  paragraph  to  state  that  “Cloud  computing  has  the  potential  to  play  a  major  part  in 
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addressing  these  inefficiencies  and  improving  government  service  delivery.” 

Fundamental  to  cloud  computing  is  not  only  the  efficiencies  that  are  gained  through 
migration  to  a  cloud,  but  the  potential  for  real  savings  to  operational  cost  and  capital  expenses. 
Because  of  these  cost  savings  the  White  House  instituted  a  “Cloud  First”  policy.  The  “Cloud 
First”  policy  is  “intended  to  accelerate  the  pace  at  which  the  government  will  realize  the  value  of 
cloud  computing  by  requiring  agencies  to  evaluate  safe,  secure  cloud  computing  options  before 
making  any  new  investments.”  What  is  important  to  note  is  it  is  not  mandatory  to  move  to 
federal  organizations  to  a  cloud,  rather  agencies  should  look  at  migrating  to  a  cloud  and 
determine  if  the  benefits  and  value  support  migrating  to  the  cloud. 
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Following  this  business  case  analysis  agencies  need  to  focus  on  what  portion  of  their 
agency  is  appropriate  to  move  to  the  cloud,  additionally  under  what  deployment  model,  i.e 
private,  public,  hybrid,  or  community.  As  part  of  the  “Cloud  First”  policy  and  subsequent  25 
Point  Implementation  Plan  to  Reform  Federal  Information  Technology  Management  of 
December  2010  Vivik  Kundra  established  that  “Each  agency  will  identify  three  “must  move” 
services  within  three  months,  and  move  one  of  those  services  to  the  cloud  within  12  month  and 
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the  remaining  two  within  18  months.”  The  Department  of  Defense  released  their  Department 
of  Defense  Information  Enterprise  Strategic  Plan  2010-2012  to  adopt  the  “Cloud  Eirst”  policy. 

As  part  of  this  strategic  plan  the  DoD  must  push  toward  a  culture  change  from  “stovepiped  and 
service  centric”  networks  to  an  environment  of  increased  “network  centric  operations”  and 
information  sharing.  Specifically  the  DoD  CIO  established  six  DoD  Information  Enterprise 
goals  in  order  to  expand  information  sharing  and  elimination  of  stovepipes.  The  first  of  these 
goals  is  “Information  as  a  Strategic  Asset”  Changing  the  view  of  information  to  one  of  a 
critical  importance  requires  the  aforementioned  culture  change,  but  it  also  moves  the  view  of 
linking  one  user  to  another  in  order  to  pass  information  to  a  view  of  information  residing  in  one 
place  and  all  users  access  the  information  when  necessary.  To  put  it  another  way  the  information 
is  grabbed  by  the  user,  not  pushed  to  him  or  her.  “DoD’s  transition  from  Component-centric, 
non-interoperable  capabilities  to  joint  net  enabled  capabilities  will  be  accomplished  with 
community  based  solutions. .  .Eor  greater  efficiency,  these  services  will  be  brought  together  in 
shared  services  centers  or  “Clouds”. .  .that  enable  information  flow  from  one  domain  to 
another.”"^'* 

These  clouds  will  need  to  be  accessed  at  all  times  by  those  members  given  access  to  the 
respective  cloud,  be  it  public  or  private.  The  important  piece  is  all  uniformed  services  with  the 
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Department  of  Defense  need  to  begin  aetively  moving  to  a  eloud  based  eomputing  arehiteeture 
where  it  makes  sense.  “As  the  DoD  moves  further  along  the  net-eentrie  operations  path,  the 
Department  must  transform  its  infrastrueture  eoncept  to  support  new  serviee-oriented 
approaehes,  sueh  as  eloud  eomputing  and  virtualization,  for  sharing,  storing,  proeessing  and 
transporting  information.”"^^ 

The  Marine  Corps  and  Cloud  Computing 

Currently  the  Marine  Corps  is  working  toward  a  robust  eloud  infrastrueture.  But  their 
entry  into  eloud  eomputing  is  further  than  most  other  serviees  when  eonsidering  the  true 
definition  of  eloud  eomputing  by  NIST.  The  time  for  the  Marine  Corps  to  transition  eompletely 
to  eloud  eomputing  is  appropriate  when  looking  at  the  eurrent  budgetary  eonstraints  the  United 
States  eeonomy  is  experieneing.  The  Marine  Corps  Private  Cloud  Computing  Strategy 
establishes  the  vision  for  the  future  of  eloud  within  the  Marine  Corps.  Published  30  November 
2011  the  purpose  of  the  “Marine  Corps  Private  Cloud  Computing  Enterprise  (PCCE)  serviees 
will  provide  aeeess  from  anywhere  aeross  the  Marine  Corps  information  environment  at  any 
time,  via  the  Marine  Corps  Enterprise  Network  (MCEN)  to  a  shared  pool  of  eonfigurable 
eomputing  resourees  (e.g.  networks,  servers,  storage,  applieations,  and  serviees)  that  ean  rapidly 
be  provisioned  and  released  with  redueed  management  effort.”  Beeause  the  Marine  Corps  is 
an  expeditionary  serviee  that  prides  itself  on  “being  ready  when  the  nation  is  least  ready. the 
vision  and  plans  for  eloud  eomputing  must  address  sharing  information  via  the  eloud  in  both  a 
garrison  environment  and  during  expeditionary  operations  when  Marines  are  stationed  in  remote 
loeations  that  have  limited  bandwidth  and  internet  aeeess. 

The  Marine  Corps  solution  for  eloud  eomputing  both  within  the  serviee  and  nested  with 
the  DoD  and  Eederal  Data  Enterprise  strategies  is  through  the  use  of  the  Marine  Corps  Enterprise 


20 


IT  Services  program,  otherwise  known  as  MCEITS.  The  mission  of  MCEITS  is  to  “provide 
enterprise  IT  services,  service  support  and  the  infrastructure  necessary  to  enable  a  secure, 
collaborative,  interoperable  information  sharing  environment  for  the  warfighting  and  business 
domains. One  fundamental  goal  of  this  program  is  to  “Deliver  an  Enterprise  and  Distributed 
capability  aligned  with  the  USMC  Regionalization  Concept  and  support  an  Expeditionary 
capability.”"^^  This  focus  on  supporting  Marines  in  an  expeditionary  environment  is  critical  in 
order  to  rapidly  provide  data  when  it  is  needed.  The  cloud  that  supports  the  expeditionary 
environment  must  be  able  to  address  the  challenges  of  limited  bandwidth,  over-the-horizon  and 
satellite  communications,  rapid  data  updates,  and  the  ability  to  replicate  data  aboard  naval 
shipping  and  ashore  that  was  constructed  in  CONUS.  Overall  the  key  thing  that  must  be  adhered 
to  with  cloud  computing  for  the  Marine  Corps  is  “agility”"^^  This  agility  must  enable  the  Marine 
Corps  to  provide  the  necessary  data  to  the  warfighter  when  it  is  needed  with  little  to  no 
interruption  in  service. 

Currently  the  Marine  Corps  is  working  to  provide  Infrastructure  as  a  Service  (laaS)  and 
Platform  as  a  Service  (PaaS).  According  to  Maj  Shawn  Kelly,  MCEITS  falls  short  of  legitimate 
cloud  computing  and  PaaS  in  a  few  critical  areas.  “MCEITS  (in  my  opinion)  is  not  cloud 
computing,  but  more  resembles  traditional  web-hosting.  Of  the  five  essential  characteristics  of 
Cloud  Computing  in  the  NIST  definition,  four  have  not  been  met  by  MCEITS  Infrastructure;  No 
on-demand  self  service,  limited  resource  pooling,  no  rapid  elasticity,  and  no  measured  service. 
Additionally  the  MCEITs  PaaS  capability  does  not  include  “"programming  languages,  libraries, 
services,  and  tools"  discussed  in  the  NIST  definition  and  key  to  PaaS  are  not  provided  by 
MCEITS  at  this  time.”  According  to  Major  Kelly  the  prudent  way  to  execute  a  cloud 
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computing  strategy  for  the  Marine  Corps  would  be  to  start  in  CONUS,  then  expand  OCONUS 
onee  the  serviee  is  eomfortable. 

Garrison  Cloud 

A  plan  for  establishing  eloud  eomputing  and  eloud  serviees  for  the  Marine  Corps  eould 
be  envisioned  as  establishing  two  large  data  eenters  in  Kansas  City  and  Albany.  These  data 
eenters  will  provide  the  initial  infrastrueture  to  build  eapaeity  for  the  larger  number  of  users,  as 
well  as  storage  space.  This  would  constitute  what  is  known  as  MCEITS  at  large  (see  Figure  2). 

In  order  to  expedite  the  aeeess  to  data  required  by  Marines  seven  Marine  IT  Centers  (MITCs)  or 
“mini-data”  centers  would  be  established  throughout  the  eountry  in  order  provide  faster 
eomputing  speeds  and  proeessing  power.  This  model  would  establish  MCEITS  Distributed. 
Additionally  it  will  provide  more  servers  with  whieh  the  serviee  could  utilize  for  “virtualization”. 
Virtualization  is  the  key  to  eloud  eomputing  at  the  PaaS  level  in  that  it  provides  a  level  of 
redundancy  and  increased  eapaeity  and/or  loading  demands  that  would  be  needed  during  surge 
usage  periods.  The  ability  to  provide  surge  eapaeity  or  reduce  eapaeity  without  interruption  to 
eomputing  power  is  what  is  known  as  “elastieity.”  Upon  reduetion  in  need  for  a  eertain  serviee, 
the  use  of  requisite  servers  will  deerease.  This  is  the  agility  the  Marine  Corps  needs. 

Additionally  these  data  eenters  provide  a  level  of  seeurity  that  eounters  the  fear  of  many  towards 
eloud  eomputing.  For  most  unaware  of  the  potential  or  eoneept  of  cloud  computing  the  fear  of 
not  knowing  where  their  data  is  loeated  and  the  ability  of  an  adversary  to  haek  into  our  data 
storage  to  exploit  private  information  is  eountered  by  the  spreading  of  data  aeross  these  data 
eenters.  By  spreading  the  data  aeross  different  servers  through  the  eoneept  of  virtualization  or 
“loading”  you  effeetively  foree  your  adversary  to  guess  where  the  information  is  stored.  Another 
way  to  imagine  this  eoneept  is  akin  to  the  theory  behind  Operational  Maneuver  from  the  Sea 
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(OMTFS).  By  launching  an  amphibious  assault  from  over  the  horizon  towards  an  enemy 
eoastline  you  foree  the  enemy  to  deeide  to  foeus  his  efforts  in  one  spot  or  spread  his  defenses. 
Similarly  in  eloud  eomputing  you  foree  the  enemy  to  guess  where  the  data  is  stored  as  it  is 
applied  aeross  different  servers  at  random  times  predieated  upon  the  load  on  other  servers. 

Expeditionary  Cloud  Computing 

In  order  to  sustain  the  expeditionary  needs  of  the  Marine  Corps,  naval  shipping  eould  be 
outfitted  with  a  “mirror”  image  of  the  servers  baek  home  with  the  exaet  eopies  of  software, 
applieations,  and  data  ereated  in  CONUS.  Onee  afloat  or  ashore  these  applieations  eould  simply 
send  baek  and  forth  the  ehanges  in  data  that  oeeur  within  eaeh  doeument,  thereby  redueing  the 
amount  of  data  sent  and  saving  eritieal  bandwidth.  This  is  the  idea  of  Maj  Shawn  Kelley  who 
stated  that  the  eloud  ereated  afloat  or  ashore  would  mimie  the  distributed  eloud  at  the  MITCs  or 
the  overall  larger  MCEITs  eloud  at  Kansas  City  and  Albany.  Going  a  step  further  this  idea  eould 
be  ereated  ashore  with  another  eloud.  For  example  you  eould  have  a  theatre  cloud,  that  are  then 
broken  down  into  more  elouds  within  the  theatre.  For  eontemporary  applieation  you  eould  have 
an  Afghanistan  eloud  as  a  sub-eloud  of  the  CENTCOM  eloud.  Eaeh  eloud  would  have  the  same 
applieations  as  the  one  higher  or  the  elouds  horizontally  aligned  with  it  in  order  to  reduee  the 
amount  of  bandwidth  neeessary  to  send  information  baek  and  forth.  As  envisioned  by  Maj 
Kelley  ostensibly  you  would  send  bits  of  data  viee  megabytes.  Should  there  be  a  need  to  send 
large  amounts  of  data,  whieh  is  relative  based  upon  the  amount  of  bandwidth  you  have,  you 
eould  set  a  priority  list  on  who  ean  send  what  data  aeross  the  eloud.  For  example  the 
transmissions  from  a  eompany  out-post  would  be  lower  on  the  priority  list  than  that  of 
intelligenee  needed  from  higher.  What  needs  to  be  remembered  is  beeause  the  eloud  is  being 
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utilized  does  not  mean  we  throw  away  our  normal  organie  eommunieations  eapabilities,  sueh  as 
SINCGARs  or  SATCOM  radios. 

Conclusion 

The  world  is  getting  smaller  as  a  result  of  the  advanees  in  eomputing  and  teehnology. 

The  ability  to  aeeess  information  has  beeome  easier  and  is  made  more  effieient  through  eoneepts 
sueh  as  eloud  eomputing.  In  the  private  seetor  the  eoneept  of  eloud  eomputing  has  beeome  as 
transparent  to  the  end  user  as  legaey  designs  on  information  aeeess.  Cloud  eomputing  today  is 
beeoming  the  way  in  whieh  end  users  aeeess  their  information.  Rather  than  obtaining  data  in  a 
linear  fashion,  as  was  done  in  the  past,  similar  to  a  phone  line,  users  ean  now  grab  the 
information  they  need  or  utilize  an  applieation  they  desire  by  leverage  the  power  of  the  internet. 
The  ability  to  do  this  opens  up  a  world  in  whieh  the  power  of  leveraging  multiple  servers  as  the 
foundation  for  the  eloud  are  utilized  to  improve  proeessing  speeds,  inerease  redundaney,  and 
inerease  seeurity.  Knowledge  and  use  of  cloud  computing  within  the  federal  government  is  on 
the  rise  and  awareness  of  this  concept,  as  well  as  the  capabilities  and  benefits,  are  slowly  making 
their  way  across  all  agencies  and  levels  of  our  government.  The  Department  of  Defense 
understands  the  necessity  to  provide  faster  access  to  critical  information  at  all  times. 

The  DoD  mandate  to  institute  cloud  computing  will  hopefully  push  our  military 
capabilities  further  into  the  21st  century  and  provide  us  some  level  of  leverage  in  the  cyber 
domain  against  our  adversaries.  The  Marine  Corps  is  on  the  path  to  cloud  computing,  albeit 
slowly.  While  this  paper  is  not  advocating  equipping  expeditionary  units  with  cloud  computing 
capabilities  first,  rather  the  concept  must  be  proven  out  in  a  benign  environment,  specifically  in 
CONUS,  in  order  to  respond  to  any  initial  failures.  Once  best  business  practices  are  established 
the  capability  can  be  pushed  forward  to  the  warfighter.  What  is  important  to  take  away  is  the 


24 


Marine  Corps  needs  to  take  that  first  solid  step.  While  the  serviee  has  a  eloud  eomputing 
strategy,  the  Marine  Corps  needs  to  fully  embraee  the  power  of  eloud  eomputing  and  its  ultimate 
power  to  provide  agility  at  all  levels,  from  operational  to  taetieal  and  the  benefit  to  the  strategic 
objectives  and  levels.  Without  taking  risks  organizations  will  not  make  gains.  The  Marine 
Corps  needs  to  fully  invest  all  available  resources  to  cloud  computing.  We  have  always  been  a 
service  of  innovation,  we  need  to  continue  this  legacy  and  lead  the  DoD  into  the  world  cloud 
computing. 
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Figure  1 

Cloud  Service  Models"^^ 
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Figure  2 


Marine  Corps  Cloud  Computing  Concept 


Data  Centers 

Marine  IT  Centers  (MITC) 

Deployable  Servers 

The  concept  behind  MCEITs  is  establishing  two  large  data  centers  in  Albany  and  Kansas 
City.  Nine  MITCs  will  be  established  throughout  the  country,  in  close  proximity  to  USMC 
bases  and  stations  to  improve  access  and  processing  power.  Units  afloat  will  have  a 
deployable  server  to  utilize  in  a  similar  fashion  as  the  MCEITs  Distributed. 
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